I'm testing an internal web application that pulls content from servers that I'd rather leave 100% alone, and some of them send the "X-Frame-Options" header. While that's the right setting in production, while we're testing, I'd like to strip it out on just our browsers.

Is that possible? Googling turned up nothing.


You could put an intermediary proxy like WebScarab in the middle. It'll allow you to rewrite responses on the fly so you should be able to strip that header out.

  • That's close to what I'm doing, I'm just running everything through Fiddler2 and looking at it there. For the small amount of traffic I need to test it works fine. – Dave Apr 7 '11 at 20:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.